
November 8, 2018 

Ms. Emma Best 

MuckRock News 

411A Highland Avenue 

Dept. MR 49294 

Somerville, Massachusetts 02144 

RE: Response for OPIC FOIA Request 2019-00004, NARA NGC18-367 


Dear Ms. Best, 

You filed Freedom of Information Act (“FOIA”) requests with the National Archives and 
Records Administration (NARA) for each agency’s SF-716 forms. NARA referred the forms 
submitted by the Overseas Private Investment Corporation (OPIC) to our agency for direct 
response to you. OPIC received this referral on November 2, 2018 and assigned it FOIA 
Number 2019-00003. Please reference this number in all correspondence. 

OPIC is releasing the records referred by NARA in part. Partial withholdings have been 
made under Exemptions b(5) and b(6). The FOIA contains nine exemptions which allow an 
agency to withhold information from release. 


Exemption b(5) protects “inter-agency or intra-agency memorandums or letters which 
would not be available by law to a party other than an agency in litigation with the agency.” 

5 U.S.C. § 552(b)(5) (2012). These forms were submitted between OPIC and NARA, two 
federal agencies and are therefore inter-agency records. OPIC has used Exemption b(5) to 
withhold portions of the records which contain sensitive information about OPIC’s security 
program. 

Exemption b(6) of the FOIA protects information about individuals in “personnel and 
medical files and similar files” when the disclosure of such information “would constitute a 
clearly unwarranted invasion of personal privacy.” 5 U.S.C. § 552(b)(6). The exemption was 
meant to be interpreted broadly and is not tied to the label of the file containing the information. 
United States Department of State v. Washington Post Co.. 456 U.S. 595 (1982). Exemption 
b(6) is therefore applied when the private interest in keeping personal information is greater than 
the public interest in disclosure. Dep’t of the Air Force v. Rose. 47.5 11 S 352,372(1976). The 
only public interest relevant in a b(6) inquiry is the public interest in knowing what the 
government is up to. Dep’t of Defense v. Fed. Labor Rel’n Auth.. 510 U.S. 487, 497 (1994). 
OPIC has used Exemption b(6) to withhold the direct contact information of its staff. This 
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information is tied to an individual and shows no government action. OPIC has also used 
Exemption b(6) to withhold the identity of the OPIC staff who were the contacts for the forms 
Revealing their identity would reveal their security clearances, which is personal information 
that does not reveal government action. The identity of the senior official in charge of OPIC’s 
security has been left intact as this is the official who bears the responsibility of ensuring the 
agency’s compliance. 

This is a final agency response. You may contact me or the FOIA Public Liaison for any 
further assistance and to discuss any aspect of your request. Additionally, you may contact the 
Office of Government Information Services (OGIS) at the National Archives and Records 
Administration to inquire about FOIA dispute resolution services they offer. The contact 
information for OGIS is as follows: 

Office of Government Information Services 
National Archives and Records Administration 
8601 Adelphi Road-OGIS 
College Park, MD 20740-6001 
Email: ogis@nara.gov 

Phone: 202-741-5770 | Toll Free: 877-684-6448 | Fax: 202-741-5769 

If you are not satisfied with OPIC’s response to this request, you may administratively 
appeal by addressing a written appeal to the following: 

Deputy General Counsel 
Overseas Private Investment Corporation 
1100 New York Ave., N.W.—12th Floor 
Washington, D.C. 20527 

Your appeal must be postmarked or electronically transmitted within 90 days of the date 
of this response to your request. Both the envelope and the letter should be marked “FREEDOM 
OF INFORMATION ACT APPEAL.” The appeal should clearly identify the agency 
determination that is being appealed and include the request number. If you are not satisfied 
with the results of any such appeal, judicial review is available to you in the United States 
District Court for the judicial districts in which you reside or have your principal place of 
business, or in the District of Columbia. 


Sincerely, 

Nichole Skdyles 

Administrative Counsel 

Overseas Private Investment Corporation 

1100 New York Avenue, N.W. 

Washington, D.C. 20527 

202.408.6297 | Nichole.Skoyles@opic.gov 
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1100 N»w York Avonuo, N.W. 
Wuhlnglon, O.C. 20527-0001 
(202) 336-6400 
FAX {202} 408-8858 


March 21, 2003 


Laura L.S. Kimberly 
Associate Director for Policy 
Information Security Oversight Office 
National Archives and Records Administration 
700 Pennsylvania Avenue, NW 
Washington, DC 20408 

Subject: Report on Cost Estimates for Security Classification Activities 


Dear Ms Kimberly: 


Reference your letter dated February 7, 2003, subject as above. 


Attached is a report addressing cost estimates for security classification activities for the 
Overseas Private Investment Corporation for Fiscal Years 2002, 2003, and 2004. 


If you need additional information, please contact the undersigned at 




Attachment as Stated 
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2004 Security Cost Estimates 


1. Personnel Security 

FY 02 $76K 

• estimate is based on $63K actual cost incurred to obtain security 
clearances for FTEs 

• 10% of $126K (GS15 salary plus 24% fringe benefits) for 
administration cost 

FY 03 $62K 

• estimate is based on $40K budgeted to obtain security clearances for 
FTEs 

• 10% of $ 13 OK (GS15 salary plus 24% fringe benefits) for 
administration cost 

• Background investigations for 40 contractor staff personnel @$95 per 
investigation 

• 10% of $45K (GS7 salary plus 24% fringe benefits) for administration 
cost of contractor background investigations 

FY 04 $61K 

• estimate is based on $40K budgeted to obtain security clearances for 
FTEs 

• 10% of $ 136K (GS15 salary plus 24% fringe benefits) for 
administration cost 

• background investigations for 10 contractor staff personnel @$95 per 
investigation 

• 10% of $56K (GS9 salary plus 24% fringe benefits) for administration 
cost of contractor background investigations 

2. Physical Security 

FY02 $7K 

• 10% of $66K (GS11 salary plus 24% fringe benefits) for 
administration 

FY03 $18K 

• estimate is based on 10% of $45K (GS7 salary plus 24% fringe 
benefits) 

• 10% of $13 IK (GS14 salary plus 24% fringe benefits) 
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FY04 $5K 

• estimate is based on 10% of $45K (GS7 salary plus 24% fringe 
benefits) 

3. Information Security 

a. Classification Management- Estimate for each fiscal year is based on 
10% of a FTE. 

FY02 FY03 FY04 

$6K $5K $5K 

b. Declassification- No declassification activity 

c. Information Technology - 0 

4. Professional Education, Training and Awareness 

FY02 FY03 FY04 

0 $1K $1K 


5, Security Management, Oversight and Planning - Estimate is based on 
10% of GSM salary for each year. 

FY02 FY03 FY04 

S12K $14K $14K 



March 19, 2004 


Ms. Laura L.S. Kimberly 
Associate Director for Policy 
Information Security Oversight Office 
National Archives and Records Administration 
700 Pennsylvania Avenue, N.W. 

Washington, DC 20408 

Subject: Report on Cost Estimates for Security Classification Activities 
Dear Ms. Kimberly: 

Attached is a report addressing cost estimates for security classification activities for the 
Overseas Private Investment Corporation for Fiscal Years 2003,2004, and 2005. 

If you need additional information, please contact me at^^^^^ 



^^USecurity & Administrative Services 
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Security Cost 
Basis of Estimates 


3 / 18/04 


1. Personnel Security 

FY 03 $62K 

• estimate is based on $40K budgeted to obtain security clearances for 
OPIC FTEs 

• personnel salary, 10% of $ 13 OK (GS15 salary plus 24% fringe 
benefits) for administration cost 

• personnel salary, 10% of $45K (GS7 salary plus 24% fringe benefits) 
for administration cost of contractor background investigations 

• background investigations for 40 contractor staff personnel @$95 per 
investigation 

FY 04 $63K 

• estimate is based on S40K budgeted to obtain security clearances for 
FTEs 

• personnel salary, 10% of $ 141K (GS 15/5 ($ 114K) salary plus 24% 
fringe benefits) for administration cost 

• personnel salary, 10% of $58K (GS9/5 ($47K) salary plus 24% fringe 
benefits) for administration cost of contractor background 
investigations 

• background investigations for 30 contractor staff personnel @$120 
per investigation 

FY 05 $65K 

• estimate is based on $40K budgeted to obtain security clearances for 
OPIC FTEs 

• personnel salary, 10% of $ 141K (GS 15/5 ($ 114K) salary plus 24% 
fringe benefits) for administration cost 

• personnel salary, 10% of $76K (GS 12/1 ($61K) salary plus 24% 
fringe benefits) for administration cost of contractor background 
investigations 

• background investigations for 30 contractor staff personnel @$ 120 
per investigation 
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2. Physical Security 
FY03 $20K 

• personnel salary, estimate based on 10% of $45K (GS7 ($36K) salary 
plus 24% fringe benefits) 

• personnel salary, 10% of $ 141K (GS15/5 ($ 114K) salary plus 24% 
fringe benefits) 

FY04 $98K 

• personnel salary, estimate is based on 10% of $58K (GS9/5 ($47K) 
salary plus 24% fringe benefits) 

• upgrade security & alarm systems, $25K 

• implement new badging system, $15K 

FY05 S101K 

• personnel salary, estimate is based on 10% of $76K (GS12/1 ($6IK) 
salary plus 24% fringe benefits) 

• Install CCTV, $25K 

3. Information Security 

a. Classification Management- Personnel salary estimate for each fiscal year 
is based on 10% of a FTE, (FY05 cost is based on GS 12/1 ($6IK) salary 
plus 24% fringe benefits) 

FY03 FY04 FYG5 

$5K $5K $8K 

b. Declassification- No declassification activity 

c. Information Technology - Install CableExpress ($60K), and install 2 
analog lines in Rm 11163 @ $400.mo. 

FY03 FY04 FY05 

0 $2400 $64,800 

d. Miscellaneous (OPSEC & TSCM)- No activity 
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4. Professional Education, Training and Awareness - 
Security Specialist Course-DSS, 3 weeks 
COMSEC training at NSA- 1 week 
Physical Security Course at DSS (2 people)-2 weeks 

FY03 FY04 FY05 

$1K $5K $5K 


5. Security Management, Oversight and Planning - Personnel salary, 
estimate is based on 10% of $141K (GS15/5 ($114K) salary plus 24% fringe 
benefits). 

FY03 FY04 FY05 

$14K $14K $14K 
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FY 2006 Security Cost Estimates Display 


Name of Department/Agency: 


Overseas Private Investment Corporation 


[Please use actual dollar figures instead of thousands.) 


_______— ■■ —.. '■ " — 

Reporting Categories 

FY 2004 

FY 2005 

FY 2006 


1. Personnel Security 

$63,000.00 

$78,000.00 

$82,000.00 


2. Physical Security 



$246,000.00 





Il 

it 

(a.) Classification Management 

$5,000.00 

$9,600.00 

$9,900.00 


(b.) Declassification 

$10,000.00 

$20,000.00 

$15,000.00 


(c.) Information Systems Security for Classified Information 

_Q_ 

$2,400,00_ 

$75,000.00 


(d.) Miscellaneous (OPSEC & TSCM) 

0 

0 

0 


(e.) Information Security Subtotal 

(Sum of 3.a., 3.b., 3.C., Jc 3.d.) 

$15,000.00 

$32,000.00 

$99,900.00 


4. Professional Education, Training and Awareness 

$5,000.00 

$6,000.00 

$8,000.00 


5. Security Management, Oversight and Planning 

$14,000.00 

$9,600.00 

$10,000.00 


6. Unique Items 

0 

0 

0 


Totals: Fiscal Year Estimates 

(Sum of 1 , 2,3(e.), 4, 5 , & 6) 

$195,000.00 

$326,600.00 

$445,900.00 



NARRATIVE: See attached 




























Oversees 

Private 

Investment 

Corporation 


1100 New York Avenue, N.W. 
Washington, D.C. 20527*0001 
(202) 336*8400 
FAX (202) 408-9859 


March 31, 2006 


Mr. J, William Leonard 
Director 

Information Security Oversight Office 
National Archives and Records Administration 
700 Pennsylvania Avenue, N.W. 

Washington, DC 20408 

Subject: Report on Cost Estimates for Security Classification Activities 


Dear Mr. Leonard: 



Attached is our report on cost estimates for security classification activities for the 
Overseas Private Investment Corporation. 


If you need additional information, please 


contact me at 
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Security & Administrative Services 


Attachment as Stated 






,s n 









Security Costs Estimates Display 

Name of Department/Aaencv: Overseas Private Investment Corporation 


(Please use actual dollar figures instead of thousands) 


Reporting Categories 

FY 2005 

FY 2006 

FY 2007 

1. Personnel Security 

mMi 



2: Physical Security 

$201,000.00 

$246,000.00 


3. Information Security 

mmmm ; 

mmmm 


(a.) Classification Management 

$9,600.00 

$9,900.00 

$8,000.00 

(b.) Declassification 

$20,000.00 

$15,000.00 

$10,000.00 

(c.) Information Systems Security for Classified Information 

$2,400.00 

$75,000.00 

$75,000.00 

(d.) Miscellaneous (OPSEC & TSCM) 

0 

0 

0 

(e.) Information Security Sub-Total 

(Sumof3.a., 3.b.. 3.C., & 3.d.) 

$32,000.00 

$99,900.00 

$93,000.00 

4. Professional Education, Training and Awareness 

$6,000.00 

$8,000.00 

$8,000.00 

5. Security Management, Oversight and Planning 

$9,600.00 

$10,000.00 

$8,000.00 

6. Unique Items 

0 

0 

0 

Totals: Fiscal Year Estimates 

(Sum of 1, 2, 3(e.), 4, 5, & 6.1 

, $326,600.00 

$445,900.00 

$309,900.00 


NARRATIVE: see attached 































Security Cost 
Basis of Estimates 


3/30/06 


1. Personnel Security 
FY 05 $78K 

• estimate is based on $45K budgeted to obtain security clearances for 
OPIC FTEs 

• personnel salary, 10% of $ 146K (GS15/5 ($ 118K) salary plus 24% 
fringe benefits) for administration cost 

• personnel salary, 10% of $96K (GS 13/2 ($77K) salary plus 24% 
fringe benefits) for administration cost of contractor background 
investigations 

• background investigations for 3 0 contractor staff personnel @$ 130 
per investigation 

FY 06 $82K 

• estimate is based on $48K budgeted to obtain security clearances for 
OPIC FTEs 

• personnel salary, 10% of $ 150K (GS 15/5 ($ 120K) salary plus 24% 
fringe benefits) for administration cost 

• personnel salary, 10% of $99K (GS13/2 ($79K) salary plus 24% 
fringe benefits) for administration cost of contractor background 
investigations 

• background investigations for 30 contractor staff personnel @$ 135 
per investigation 

NOTE: The $82K that we estimated in last year's report will be lower due 

to staff turnover. The GS13 left the end of August 2005 and was 

replaced with a GS12 in January FY06. 

FY 07 $93K 

• estimate is based on $65K budgeted to obtain security clearances for 
OPIC FTEs 

• personnel salary, 10% of $159K (GS15/7 ($129K) salary plus 24% 
fringe benefits) for administration cost 

• personnel salary, 10% of $80K (GS12/1 ($65K) salary plus 24% 
fringe benefits) for administration cost of contractor background 
investigations 
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• background investigations for 30 contractor staff personnel @$140 
per investigation 

2. Physical Security 
FY05 $201K 

• personnel salary, estimate is based on 10% of $96K (GS13/2 ($77K) 
salary plus 24% fringe benefits) 

• Upgr ade of security and alarm systems, $25K 

• Imple ment new HSP D/12 badging system, $30K 

• Visitor control for personnel and activities, based on 10% of guard 
costs, $5 OK 

FY06 $246K 

• personnel salary, estimate is based on 10% of $99K (GS13/2 ($79K) 
salary plus 24% fringe benefits) 

• Install CCTV, $30K 

• HSPD/12 initiative - upgrade of access control equipment, $65K 

• Visitor control for personnel and activities, based on 10% of guard 
costs, $52K 

NOTE: The $246K that we estimated in last year's report will be lower 
due to changing governmental priorities and lack of funding. We did not 
have funds allotted for bullets 2-3 in FY2006. We also had staff turnover 
- the GS13 left the end of August 2005 and was replaced with a GS12 in 
January FY06. 

FY07 $107K 

• personnel salary, 10% of $80K (GS12/1 ($65K) salary plus 24% 
fringe benefits) for administration cost of contractor background 
investigations 

• Install CCTV, $30K 

• HSPD/12 initiative - upgrade of access control equipment, $65K 

• Visitor control for personnel and activities, based on 10% of guard 
costs, $48K 
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3/30/06 


3. Information Security 

2 . « * 

a. Classification Management- Personnel salary estimate for each fiscal year 
is based on 10% of a FTE, (FY05 cost is based on GS 13/2 ($77K) salary 
plus 24% fringe benefits) 

NOTE: The FY06 cost that we estimated in last year's report will be lower 
due to staff turnover. The GS13 left the end of August 2005 and was 
replaced with a GS12 in January FY06. 

FY05 FY06 FY07 

$9600K $9900K 8000K 

b. Declassification- Personnel salary estimate for each fiscal year based on 
number of estimated hours multiplied by hourly rate of FTE/contractors 
NOTE: We expect the declassification costs to decrease in 2007. 

FY05 FY06 FY07 

$20K $15K $10K 

*1 ,c » 

c. Information Technology - Install CableExpress ($70K), and install 2 
analog lines in Rm 11163 @ $400.mo. 

NOTE: The FY2006 cost that we estimated in last year's report was not 
funded. We also had staff turnover that impacted this initiative. 

FY05 FY06 FY07 

$2400 $75K $75K , 

d. Miscellaneous (OPSEC & TSCM)- No activity 

FY05 FY06 FY07 

0 0 0 

4. Professional Education, Training and Awareness - 

Security Specialist Course-DSS, 3 weeks 

Physical Security Course at DSS (2 people)-2 weeks 

Miscellaneous security conferences and training courses 

FY05 FY06 FY07 

$6K $8K $8K 
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3/30/06 


5. Security Management, Oversight and Planning - Personnel salary, 
estimate is based on 10% of S96K (GS13/2 ($77K) salary plus 24% fringe 
benefits). 

NOTE: The FY06 cost that we estimated in last year's report will be lower 
due to staff turnover. The GS13 left the end of August 2005 and was 
replaced with a GS12 in January FY06. 


FY05 FY06 FY07 

$9600K $10K $8K 
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1100 New York Avenue, N.W. 
Washington, D.C. 20527-0001 
(202) 336-8400 
FAX (202) 408-9859 


March 7,2008 


Mr. William J. Bosanko 
Acting Director 

Information Security Oversight Office 
National Archives Building 
Room 500 

700 Pennsylvania Avenue, N.W. 

Washington, D.C. 20408-0001 

RE: Report on Cost Estimates for Security Classification Activities 
Dear Mr. Bosanko: 


Attached is our FY2007 report on cost estimates for security classification activities for 
the Overseas Private Investment Corporation. 

Please do not hesitate to contact me at|§ iff if you need additional information. 


V 



{Security & Administrative Services 
Overseas Private Investment Corporation 
1100 New York Ave. N.W. 

Washington, D.C. 20527 
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Security Costs Estimates Report 

Name of Department/Agency: Overseas Private Investment Corporation 


Reporting Categories 


1. Personnel Security 

2. Physical Security 

3. Information Security 

(a.) Classification Management 


(b.) Declassification 

(c.) Information Systems Security for Classified Information 


(d.) Miscellaneous (OPSEC & TSCM) 

(e.) Information Security Sub-Total 

(Sum of3.a„ 3.b„ 3.C., & 3.d.) 

4. Professional Education, Training and Awareness 

5. Security Management, Oversight and Planning 

6. Unique Items 

Totals: Fiscal Year Estimates 

_ (Sum of 1,2, 3(e.), 4, 5,&6.) _ 


(Please use actual dollar figures instead of thousands) 

FY 2007 


$77,902.55 


$16,637.70 



$1,234.20 


$25,386.70 


$0 


$0 

$26,620.90 

«T 

$21,183.20 ' 
$0 

$142,344.35 


NARRATIVE: See attached 






OPIC 2007 Report on Cost Estimates for Security Classification Activities 

Basis of Estimates 

1. Personnel Security - FY 07 $77,902.55 

• estimate is based on $52,000.00 to obtain security clearances for OPIC FTEs 

• personnel salary, 10% of $132,435.00 (GS15/7) 

• personnel salary, 15% of $79,397.00 (GS13/1) 

• $750.00 for background investigations for contractor staff personnel 

2. Physical Security - FY07 $16,637.70 

• personnel salary, estimate is based on 10% of $79,397,00 (GS13/1) 

• Visitor control for personnel and activities, based on 5% of guard costs 
($43,490.00) 

3. Information Security - FY07 - $34,560.60 

a. Classification Management - 

• $7,939.70 - Personnel salary estimate is based on 10% of $79,397.00 (GS 132/1) 
« $ 1,234.20 - Cost of OPIC files housed at WNRC that contain classified material 

b. Declassification- $25,386.70 

Estimated cost includes WNRC services, State Dept, declassification office 
services, and OPIC personnel salary. 

c. Information Technology - 

$0 

d. Miscellaneous (OPSEC & TSCM) 

$0 

4. Professional Education, Training and Awareness - FY07 - $0 

Attended miscellaneous government sponsored security 
conferences and training 

5. Security Management, Oversight and Planning - FY07 - $21,183.20 

Personnel salary, estimate is based on 10% of $79,397.00 (GS 11/1) and 
personnel salary, 10% of $132,435.00 (GS15/7) 


6. Unique items: FY07 - $0 




Security Costs Estimates Display 

Name of Department/Agency: Overseas Private Investment Corporation 


(Please use actual dollar figures instead of thousands) 


Reporting Categories 

FY 2008 

1. Personnel Security 

$86,637.75 Z(qlo^> 

2. Physical Security 

S28.710.35 ^il' 0 

3. Information Security 


(a.) Classification Management 

$19,287.50 

(b.) Declassification 

0 

(c.) Information Systems Security for Classified Information 

0 

(d.) Miscellaneous (OPSEC & TSCM) 

0 

(e.) Information Security Sub-Total 

(Sum of 3.a., 3.b., 3.O., & 3.d.) 

$19,287.50 

4. Professional Education, Training and Awareness 

0 

5. Security Management, Oversight and Planning 

$22,795.40 -32| T|b 

6. Unique Items 

0 

Totals: Fiscal Year Estimates 

(Sum of 1, 2, 3(e.), 4, 5,&6.) 

$157,431.00 t/ 



NARRATIVE: 





Overseas 

Private 

Investment 

Corporation 



1100 New York Avenue, N.W. 
Waehlngton, D.C, 20527-0001 
(202) 336-8400 
FAX (202) 408-9859 


February 26, 2010 

Mr. William J. Bosanko 
Director 

Information Security Oversight Office 
National Archives Building 
700 Pennsylvania Avenue, N.W. 

Washington, D.C. 20408-0001 

RE: Report on Cost Estimates for Security Classification Activities 
Dear Mr. Bosanko: 

Attached is our FY2009 report on cost estimates for security classification activities for 
the Overseas Private Investment Corporation. 

Please do not hesitate to contact me at|j|j^m|f you need additional information. 



Overseas Private Investment Corporation 
1100 New York Ave. N.W. 

Washington, D.C. 20527 


Attachment as Stated 




Security Costs Estimates Display 

Name of Department/Agency: Overseas Private Investment Corporation 


Point of contact (Name/phone number) 


Reporting Categories 


1. Personnel Security 

2. Physical Security 


3. Information Security 

(a.) Classification Management 


(b.) Declassification 

(c.) Information Systems Security for Classified Information 
(d.) Miscellaneous (OPSEC & TSCM) 

4. Professional Education, Training and Awareness 

5. Security Management, Oversight and Planning 

6. Unique Items 

Totals: Fiscal Year Estimates 

(Sum of 1, 2, 3(a),3(b),3(c),3(d) 4, 5, & 6.) 



(Please use actual dollar fiRures instead of thousands) 

FY 2009 


$109,047,10 


$33,137.30 



$ 17,303.05 


0 

o' 

o' 


/ 


0 

$24,174.80 

0 

$ 183,662.25 


NARRATIVE: see attached 



OPIC 2009 Report on Cost Estimates for Security Classification Activities 

Basis of Estimates 

1. Personnel Security - FY09 $109,047.10 

• estimate is based on $75,00.00 to obtain security clearances for OPIC FTEs 

• personnel salary, 10% of $149,025.00 (GS15/8) 

• personnel salary, 20% of $92,723.00 (GS13/2) 

• $600.00 for background investigations for contractor staff personnel 

2. Physical Security - FY09 $33,137.30 

• personnel salary, estimate is based on 10% of $92,723.00 (GS13/3) 

• Visitor control for personnel and activities, based on 5% of guard costs 
($58,500.00) 

• Access control system maintenance & monitoring - $20,940.00 

3. Information Security - FY09 - $17,303.05 

a. Classification Management - 

• $9,851.80 - Personnel salary estimate is based on 10% of $98,518.00 (GS 13/5) 

• $7,451.25 - personnel salary, 5% of $149,025.00 (GS15/8) 

b. Declassification- 

$0 

c. Information Technology - 

$0 

d. Miscellaneous (OPSEC & TSCM) 

$0 

4. Professional Education, Training and Awareness - FY09 - $0 

Attended miscellaneous government sponsored security 
conferences and training 

5. Security Management, Oversight and Planning - FY09 - $24,174.80 

Personnel salary, estimate is based on 10% of $92,723.00 (GS 13/3) and 
personnel salary, 10% of $149,025.00 (GS15/8) 


6. Unique items: FY09 - $0 



Overseas 

Private 

Investment 

Corporation 


1100 New York Avenue, N.W. 
Washington, D.C. 20527-0001 
(202) 336-8400 
FAX (202) 400-9859 



February 25, 2011 

Mr. William J. Bosanko 
Director 

Information Security Oversight Office 
National Archives Building 
700 Pennsylvania Avenue, N.W. 
Washington, D.C. 20408-0001 

RE: Report on Security Cost Estimates 

Dear Mr. Bosanko: 


Attached is our FY2010 report on security cost estimates for the Overseas Private 
Investment Corporation. 


Please do not hesitate to contact me at 


if you need additional information. 



Overseas Private Investment Corporation 
1100 New York Ave. N.W. 

Washington, D.C. 20527 


Attachment as Stated 




Security Costs Estimates 


Department/Agency: 


Overseas Private Investment Corporation 


Fiscal Year: 


2010 


Point of Contact: 
(Name and phone 
number) 



Security & Administrative Services 


Reporting Categories 


(Please use actual dollar figures Instead of thousands) 


1. Personnel Security 

(Include clearance program, initial Investigations, national agency checks when used for basis for granting a clearance, adjudication, reInvestigation, 
polygraph associated with classification related activities) 


$63,697.05 


2. Physical Security 

(Include physical security equipment, protective forces, intrusion detection and assessment, barrier/controls, 
visitor control associated with classification related activities) 


$488,892.54 

tamper-safe monitoring, access control/badging, 


3. Information Security 

Ionly report costs associated with classification related activities) 


(a) Classification Management 

(Include resources used to Identify, control, transfer, transmit, retrieve, 


$17,568.60 

inventory, archive, declassify, or destroy classified Information) 


(b) Declassification 

(include resources used to identify and process Information subject to the automatic, 
order or statute) 


$ 0.00 

systematic, or mandatory review programs authorized by Executive 


(c) Information Systems Security for Classified Information 

(include resources used to protect Information systems from unauthorized access or modification of information, and against the denial of service to 
authorized users, including measures necessary to detect, document, and counter such threats) 


$ 0.00 


(d) Miscellaneous (OPSECand TSCM) 

(Include personnel and operating expenses associated with these programs) 


$ 0.00 


4. Professional Education, Training, and Awareness 

(Include resources used to establish, maintain, direct, support, and assess an information security training and awareness program; certification and approval 
of the training program; development, management, and maintenance of training records ; training of personnel to perform tasks; and qualification and/or 
certification of personnel associated with classification related activities) 


$2,300.00 


5. Security Management, Oversight, and Planning 

(include resources associated with research, test, and evaluation; surveys, reviews, accreditation, and assessments; special access programs; security and 
Investigative matters; industrial security; and foreign ownership, control, or Influence (FOCI)) 

6. Unique Items 

(Include deparlment/agcncy-speclflc activities not reported In any of the categories listed above but are nonetheless significant and need to be Included) 


$ 0.00 


$48,672.60 


Total (sum of 1,2,3(a), 3(b), 3(c), 3(d), 4,5, and 6) 


$621,130.^79 


Narrative: provide a brief explanation of any significance difference between last year's and this year's cost estimates. Explain items entered 
Into Block 6. Unique Items. 

In 2010, OPIC signed an inter-agency agreement with GSA to receive PIV card issuance and 
support through a GSA managed service offering as part of the USAccess Program. Using a 
USAccess contract registrar, we issued HSPD-12 PIV cards to agency employees. We also worked 
with a consultant and integrator to replace our Physical Access Control System. 
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OPIC 2010 Security Cost Estimates 

1. Personnel Security - FY 2010 - $63,697.05 

Estimate is based on $20,491.85 to obtain security clearances for OPIC FTEs 
Personnel salary -10% of $155,500 (GS15/9) 

Personnel salary-20% of $97,936 (GS13/4) 

Personnel salary-3% of $105,211 (GS14/1) 

- Personnel Salary - 3% of $115,731 (GS14/4) 

- Personnel Salary-2% of $54,534 (GS8/6) 

$400.00 for background investigations for contractor staff personnel 

2. Physical Security - FY2010 - $488,892.54 

Personnel salary - 25% of $155,500 (GS15/9) 

Personnel salary - 10% of $97,936 (GS13/4) 

Visitor control for personnel and activities, based on 5% of guard costs (57793.28) 
Access control system consultant and system replacement, intrusion detection - 
$411,753.28 

HSPD-12 badges USAccess system (contract registrar and badges) - $25,577.00 

3. Information Security - FY2010 - $17,568.60 

Classification management 

Personnel salary estimate is based on 10% of $97,936 (GS13/4) 

Personnel salary estimate based on 5% of $155,500 (GS15/9) 

Declassification - $0 

Information Systems Security for Classified Information - $0 
r Miscellaneous-$0 

4. Professional Education, Training, and awareness - FY2010 - $2,300.00 

Security Professionals Seminar - $300.00 
C-Cure system training - $2,000.00 

5. Security Management, Oversight, and Planning - $48,672.60 

Personnel salary estimate based on 25% of $155,500 (GS15/9) 

Personnel salary estimate based on 10% of $97,936 (GS13/4) 


6. Unique items-$0 



Overse&a 

Private 

Investment 

Corporation 



1100 New York Avenue, N.W. 
Washington, D.C. 20527*0001 
{202) 336-8400 
FAX (202) 408-9859 


February 29, 2012 

Mr. John P. Fitzpatrick 
Director 

Information Security Oversight Office 
National Archives Building 
700 Pennsylvania Avenue, N.W. 

Washington, D.C. 20408-0001 

RE: Report on Security Cost Estimates 

Dear Mr. Fitzpatrick: 

Attached is our FY2011 report on security cost estimates for the Overseas Private 
Investment Corporation. 

Please do not hesitate to contact me atj^^HEII^frf y° u neec * additional information. 


Sincerelv. 



[Security & Administrative Services 
Overseas Private Investment Corporation 
1100 New York Ave. N.W. 

Washington, D.C. 20527 


Attachment as Stated 






AGENCY SECURITY CLASSIFICATION COSTS ESTIMATES 


Department/Agency: Overseas Private Investment Corporation 

Fiscal Year: 2011 


Point of Contact: e agf *iiWBMM 

(Name and phone number & Administrative Services 

Reporting Categories 

Please use actual dollar figures. 

1. Personnel Security 

$70,289.80 

(include clearance program, Initial Investigations, national agency checks when used as basis for 
granting a clearance, adjudication, reinvestigation, polygraph associated with classification-related activities) 

2. Physical Security 

$64,271.47 

(include physical security equipment, protective forces, intrusion detection and assessment, 
barrier!controls, tamper-safe monitoring, access controllbadging, visitor control associated with 
classification-related activities) 


3. Classification Management 

$17,865.40 

(Include resources used to Identify, control, transfer, transmit, retrieve, Inventory, archive, 
declassify, or destroy classified Information) 


4. Declassification 

$0.00 

(include resources used to Identify and process Information subject to the automatic, systematic, 
discretionary, or mandatory review programs authorized by Executive Order or Statute) 


5. Protection and Maintenance for Classified Information Systems 

$0.00 

(Include resources used to protect and maintain classified information systems from unauthorized 
access or modification of Information, and against the denial of service to authorized users, 

Including measures necessary to detect, document, and counter such threats) 


6. Operations Security and Technical Surveillance Countermeasures 

(Include personnel and operating expenses associated with OPSEC and TSCM) 

$0.00 


7. Professional Education, Training, and Awareness 

$150.00 

(include resources used to establish, maintain, direct, support, and assess an information security 
training and awareness program; certification and approval of the training program; development, 
management, and maintenance of training records; training of personnel to perform tasks; and 
qualification and/or certification of personnel associated with classification-related activities) 


8. Security Management, Oversight, and Planning 

(include resources associated with research, test, and evaluation; surveys, reviews, accreditation, 
and assessments; special access programs; security and investigative matters; industrial security; 
and foreign ownership, control, or Influence (FOCI)) 

$48,965.40 


9. Unique Items 

(Include department!agency-specific activities not reported In any of the categories listed above, 
but are nonetheless significant and need to be Included) 

$0.00 


TOTAL 

$201,542.07 

(sum of Items 1-9) 


Narrative: Provide a brief explanation of any significant difference between last year's and this year's cost 
estimates. Explain Items entered into block 9, Unique Items. 

Physical access control system replacement was completed in FY2010. FY2011 costs reflect 
maintenance and monitoring of PACS. 
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OPIC 2011 Security Cost Estimates 

1. Personnel Security - FY 2011 - $70,289.80 

- Estimate is based on $25,000.00 to obtain security clearances for OPIC FTEs 

- Personnel salary -10% of $155,500 (GS15/10) - $15,500.00 

- Personnel salary-20% of $100,904 (GS13/5)-20,180.80 

- Personnel salary -3% of $136,771 (GS14/10) - $4,103.00 

- Personnel Salary-3% of $127,883 (GS15/2) - $3,836.00 

- Personnel Salary-2% of $58,511 (GS9/5)-1170.00 

$500.00 for background investigations for contractor staff personnel 

2. Physical Security - FY2011 - $ 64,271.47 

- Personnel salary - 25% of $155,500 (GS15/10) - $38,875.00 

- Personnel salary -10% of $100,901 (GS13/5) - $10,090.40 

- Visitor control for personnel and activities, based on 5% of guard costs (57,841.46) - 
2,892.07 

Access control system maintenance & monitoring - $ 4,020.00 

HSPD-12 badges USAccess system (contract registrar and badges) - $ 8,394.00 

3. Information Security - FY2011 - $ 17,865.40 

- Classification management 

Personnel salary estimate is based on 10% of $100,904 (GS13/5) -10,090.40 
Personnel salary estimate based on 5% of $155,500 (GS15/10) - $7,775.00 
Declassification - $0 

- Information Systems Security for Classified Information - $0 
Miscellaneous - $0 

4. Professional Education, Training, and awareness - FY2011 - $ 150,00 

Security Professionals Seminar - $ 150,00 

5. Security Management, Oversight, and Planning -$48,965.40 

- Personnel salary estimate based on 25% of $155,500 (GS15/10) - $38,875.00 

- Personnel salary estimate based on 10% of $100,904 (GS13/5) -$10,090.40 


6. Unique items-$0 



Overseas 

Private 

Investment 

Corporation 



1100 New York Avenue, N.W. 
Washington, D.C. 20527-0001 
(202) 336-8400 
FAX (202) 408-9859 


February 28, 2013 

Mr. John P. Fitzpatrick 
Director 

Information Security Oversight Office 
National Archives Building 
700 Pennsylvania Avenue, N.W. 
Washington, D.C. 20408-0001 

RE: Report on Security Cost Estimates 


Dear Mr. Fitzpatrick: 


Attached is our FY2012 report on security cost estimates for the Overseas Private 
Investment Corporation. 


Please do not hesitate to contact me at 


f you need additional information. 



Overseas Private Investment Corporation 
1100 New York Ave. N.W. 

Washington, D.C. 20527 


Attachment as Stated 







AGENCY SECURITY CLASSIFICATION COSTS ESTIMATES 


Department/Agency: Overseas Private Investment Corporation 


Fiscal Year: 2012 


Point of Contact: 

(Name and phone number) 



Reporting Categories 


Please use actual dollar figures. 


1. Personnel Security 

(Include clearance program, Initial investigations, national agency checks when used as basis for 
granting a clearance, adjudication, reinvestigation, polygraph associated with classification-related activilies) 


$154,763.22 


2. Physical Security 

(Include physical security equipment, protective forces, Intrusion detection and assessment, 
barrier/controls, tamper-safe monitoring, access control/badging, visitor control associated with 
classification-related activities) 

3. Classification Management 

(Include resources used to Identify, control, transfer, transmit, retrieve, Inventory, archive, 
declassify, or destroy classified Information) 

4. Declassification 

(Include resources used to identify and process information subject to the automatic, systematic, 
discretionary, or mandatory review programs authorized by Executive Order or Statute) 

5. Protection and Maintenance for Classified Information Systems 

(include resources used to protect and maintain classified information systems from unauthorized 
access or modification of information, and against the denial of service to authorized users, 
including measures necessary to detect, document, and counter such threats) 

6. Operations Security and Technical Surveillance Countermeasures 

(Include personnel and operating expenses associated with OPSEC and TSCM) 

7. Professional Education, Training, and Awareness 

(include resources used to establish, maintain, direct, support, and assess an Information security 
training and awareness program; certification and approval of the training program; development, 
management, and maintenance of training records; training of personnel to perform tasks; and 
qualification and/or certification of personnel associated with classification-related activities) 


$46,483.25 


$20,590.25 


$1,038.70 


$979.36 


$ 0.00 


$2,500.00 


8. Security Management, Oversight, and Planning 

(include resources associated with research, test, and evaluation; surveys, reviews, accreditation, 
and assessments; special access programs; security and investigative matters; Industrial security; 
and foreign ownership, control, or Influence (FOCI)) 

9. Unique Items 

(Include department/agency-specific activities not reported In any of the categories listed above, 
but are nonetheless significant and need to be included) 

TOTAL 

(sum of items 1-9) 



Narrative: Provide a brief explanation of any significant difference between last year’s and this year's cost 
estimates. Explain items entered into block 9, Unique Items. 
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OPIC 2012 Security Cost Estimates 

1. Personnel Security - FY 2012 - $154,763.22 

- Estimate is based on $ 122,384,53 to obtain security clearances for OPIC FTEs 
Personnel salary-5% of $155,500 (GS15/10) - $7,775.00 

- Personnel salary-20% of$97,936.00 (GS13/4) - $19,587.20 

- Personnel Salary - 3% of $ 127,883 (GS 15/2) - $3,836.49 

- Personnel Salary-2% of $58,511 (GS9/5) - 1170.00 

2. Physical Security -FY2012 - $ 46,483.25 

- Personnel salary- 10% of$155,500 (GS15/10) - $15,500.00 

- Personnel salary- 10% of $97,936.00 (GS13/4) -$9793.60 

Visitor control for personnel and activities, based on 5% of guard costs (59,793.00) - 2,989.65 
Access control system maintenance & monitoring & badging - $ 18,150.00 

3. Classification Management - FY2012-$ 20,590.25 

Personnel salary estimate is based on 10% of $97,936.00 (GS13/4) - 9793.60 
Personnel salary estimate based on 5% of $52,061.00 (GS7/8) - $2603.05 

- Personnel salary estimate based on 5% of $103,872.00 (GS13/6) - $5193.60 

- WNRC Costs - $3,000.00 

4. Declassification - FY2012 - $1,038.70 

- Personnel salary estimate based on 5% of $103,872.00 (GS13/6) - $1038.70 

5. Protection and Maintenance of Classified Information Systems - - FY2012 - $979.36 
No classified network - only standalone equipment 

Personnel Salary estimate based on 1% of97,936.00 (GS 13/4)-$979.3 6 

6. Operations Security and Technical Surveillance Countermeasures - FY2012 - N/A 

7. Professional Education, Training, and awareness - FY2012 - $2,500.00 

Comsec training expenses 

8. Security Management, Oversight, and Planning - FY2012- $ 60,749.70 

Personnel salary estimate based on 10% of $155,500 (GS 15/10) - $15,500.00 
Personnel salary estimate based on 20% of $97,936.00 (GS13/4) -$19,587.20 
Personnel salary estimate based on 10% of$144,385.00 (GS15/6) - $14,438.50 
Personnel salary estimate based on 10% of 112,224,00 - $11,224.00 


9. 


Unique items - $0 


AGENCY SECURITY CLASSIFICATION COSTS ESTIMATES 


Department/Agency; Overseas Private Investment Corporation 


Fiscal Year: 2013 


Point of Contact: 

(Name and phone number)^ 


Reporting Categories 

1. Personnel Security 

(Include clearance program, Initial investigations, national agency checks when used as basis for 

granting a clearance, adjudication, reinvestigation, polygraph associated with classification-related activities) 


Please use actual dollar figures. 


$140,345.83 


2. Physical Security 

(include physical security equipment, protective forces, intrusion detection and assessment, 
barrier/controls, tamper-safe monitoring, access control/badglng, visitor control associated with 
classification-related activities) 


$72,064.35 


3. Classification Management 

(include resources used to identify, control, transfer, transmit, retrieve, Inventory, archive, 
declassify, or destroy classified information) 

4. Declassification 

(include resources used to Identify and process information subject to the automatic, systematic, 
discretionary, or mandatory review programs authorized by Executive Order or Statute) 


5. Protection and Maintenance for Classified Information Systems 

(include resources used to protect and maintain classified information systems from unauthorized 
access or modification of information, and against the denial of service to authorized users, 
including measures necessary to detect, document, and counter such threats) 

6. Operations Security and Technical Surveillance Countermeasures 

(include personnel and operating expenses associated with OPSEC and TSCM) 

7. Professional Education, Training, and Awareness 

(Include resources used to establish, maintain, direct, support, and assess an information security 
training and awareness program; certification and approval of the training program; development, 
management, and maintenance of training records; training of personnel to perform tasks; and 
qualification and/or certification of personnel associated with classification-related activities) 


8. Security Management, Oversight, and Planning 

(include resources associated with research, test, and evaluation; surveys, reviews, accreditation, 
and assessments; special access programs; security and investigative matters; industrial security; 
and foreign ownership, control, or influence (FOCI)) 

9. Unique Items 

(include department/agency-specific activities not reported in any of the categories listed above, 
but are nonetheless significant and need to be included) 



$55,798.90 


$0.00 


TOTAL 

(sum of items 1-9) 


$357,946.66 


Narrative: Provide a brief explanation of any significant difference between last year's and this year’s cost 
estimates. Explain items entered into block 9, Unique Items. 

5. OPIC used a contractor employee to mitiga te a small spillage of classified onto the OPIC network, wh ich 
constituted an unanticipated cost. Secondl' 


17. OPIC developed a new computer-based Annual Refresher Training for personnel with access. 
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Instructions for Completing Form 


I. General: The data reported will be Government cost estimates only. The estimates of resource costs should be 
reported, in the aggregate, for the following categories: (1) Personnel Security; (2) Physical Security; (3) Classification 
Management; (4) Declassification; (5) Protection and Maintenance for Classified information Systems; (6) Operations 
Security and Technical Surveillance Countermeasures; (7) Professional Education, Training, and Awareness; (8) 
Security Management, Oversight, and Planning; and (9) Unique Items. In reporting cost estimates associated with the 
security and management of classified information, please exclude all costs related to broad areas of assets protection 
(i.e., protection of property and personnel not specifically related to classified information). Counterintelligence* 
resources should also not be included in this data collection. If 51% or more of a resource is devoted to a classification- 
related activity, it should be included in this estimate. For those resources used for classification-related activities on a 
part-time basis, the total time devoted to these activities over a year must be at least 51% in order to be included in this 
estimate. Even though we no longer ask for the number of FTEs, the cost of personnel associated with the security of 
classified information should be included In the overall cost estimate for each category. 

II. Definitions of data to be reported: The primary categories are defined below along with related functional areas to 
be considered for inclusion. Report only those cost estimates associated with classification-related activities 
(programs that affect the security of classified information). 

1. Personnel Security: A series of interlocking and mutually supporting program elements that initially establish a 
Government or contractor employee's eligibility, and ensure suitability for the continued access to classified 
information. 

Clearance Program: Personnel and activities to determine eligibility and suitability for initial or continuing 
access to classified information or activities. 

Initial Investigations: Completing and reviewing Personnel Security Questionnaire, initial screening, filing data 
in Central Personnel Database, forwarding to appropriate investigative authority, and the investigation itself. 

National Agency Check: Include only when used for basis for granting a clearance. 

Adjudication: Screening and analysis of personnel security cases for determining eligibility for classified 
access authorizations and appeals process. 

Reinvestigations: Periodic recurring investigations of Government and contractor personnel. 

Polygraph: Substantive examinations in security screening process. 

2. Physical Security: That portion of security concerned with physical measures designed to safeguard and protect 
classified facilities and information, domestic or foreign. 

Physical Security Equipment: Any item, device, or system that is used primarily for the protection of classified 
information and installations. 

Protective Forces: All personnel and operating costs associated with protective forces used to safeguard 
classified information or installations, to include but not limited to salaries, overtime, benefits, materials and 
supplies, equipment and facilities, vehicles, aircraft, training, communications equipment, and management. 

Intrusion Detection and Assessment: Alarms, sensors, protective lighting, and their control systems; and the 
assessment of the reliability, accuracy, timeliness, and effectiveness of those systems used to safeguard 
classified information or installations. 

Barrier/Controls: Walls, fences, barricades, or other fabricated or natural impediments to restrict, limit, delay, 
or deny entry into a classified installation. 


* Counterintelligence means information gathered and activities conducted to protect against espionage, other 
intelligence activities, sabotage, or assassinations conducted for or on behalf of foreign powers, organizations or persons 
or international terrorist activities, but not including personnel, physical, document, or communications security programs. 
(48 CFR 970.0404-1) 
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Instructions for completing form, continued 


Vital Components and Tamper-Safe Monitoring: Personnel and operating activities associated with the 
monitoring of tamper indicating devices for containers, doors, fences, etc., which reveal violations of 
containment integrity and posting and monitoring of anti-tamper warnings or signs. 

Access Control/Badging: Personnel and hardware such as badging systems, card readers, turnstiles, metal 
detectors, cipher locks, CCTV, and other access control mechanisms to ensure that only authorized persons are 
allowed to enter or leave a classified facility. 

Visitor Control: Personnel and activities associated with processing visitors for access to facilities holding 
classified information. 

3. Classification Management: The system of administrative policies and procedures for identifying, controlling, 
and protecting from unauthorized disclosure, classified information, the protection of which is authorized by 
Executive Order or Statute. Classification management encompasses those resources used to identify, control, 
transfer, transmit, retrieve, inventory, archive, declassify, or destroy classified information. 

4. Declassification: The authorized change in the status of information from classified information to unclassified 
information. It encompasses those resources used to identify and process information subject to the automatic, 
systematic, or mandatory review programs authorized by Executive Order or Statute. 

5. Protection and Maintenance for Classified Information Systems: A classified information system is a set of 
information resources organized for the collection, storage, processing, maintenance, use, sharing, dissemination, 
disposition, display, or transmission of classified information. Security of these systems involves the protection of 
information systems against unauthorized access to or modification of information, whether in storage, processing, 
or transit and against the denial of service to authorized users, including those measures necessary to detect, 
document and counter such threats. This includes TEMPEST (short name referring to investigation, study, and 
control of compromising emanations from information systems equipment) and Communications Security 
(COMSEC) (measures and controls taken to deny unauthorized individuals information derived from 
telecommunications and to ensure the authenticity of such telecommunications. Communications security includes 
cryptosecurity, transmission security, emission security, and physical security of COMSEC material). 

6. Operations Security (OPSEC) and Technical Surveillance Countermeasures (TSCM): 

Operations Security (OPSEC): Systematic and proven process by which potential adversaries can be denied 
information about capabilities and intentions by identifying, controlling, and protecting generally unclassified 
evidence of the planning and execution of sensitive activities. The process involves five steps: identification of 
critical information, analysis of threats, analysis of vulnerabilities, assessment of risks, and application of 
appropriate countermeasures. 

Technical Surveillance Countermeasures (TSCM): Personnel and operating expenses associated with the 
development, training, and application of technical security countermeasures such as non-destructive and 
destructive searches, electromagnetic energy searches, and telephone system searches. 

7. Professional Education, Training, and Awareness: The establishment, maintenance, direction, support, and 
assessment of an information security training and awareness program; the certification and approval of the training 
program; the development, management, and maintenance of training records; the training of personnel to perform 
tasks associated with their duties; and qualification and/or certification of personnel before assignment of security 
responsibilities related to classified information. 

8. Security Management, Oversight, and Planning: Development and implementation of plans, procedures, and 
actions to accomplish policy requirements, develop budget and resource requirements, oversee organizational 
activities, and respond to management requests related to classified information. 

Research, Test, and Evaluation: The development, management, and oversight of an acceptance and 
validation testing and evaluation program, corrective action reports and related documentation that addresses 
safeguards and security elements. The examination and testing of physical security systems (construction, 
facilities, and equipment) to ensure their effectiveness and operability and compliance with applicable directives. 
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Instructions for completing form, continued 


Surveys, Reviews, Accreditation, and Assessments: Personnel and activities associated with surveys, 
reviews, accreditations, and assessments to determine the status of the security program and to evaluate its 
effectiveness; development and management of a facility survey and approval program; facility pre-survey; and 
information technology system accreditation. 

Special Access Programs (SAP): Programs established for a specific class of classified information that 
impose safeguarding and access requirements that exceed those normally required for information at the same 
classification level. Unless specifically authorized by the President, only the Secretaries of State, Defense, 
Energy, and the Director of National Intelligence may create an SAP. Sensitive Compartmented Information 
(SCI) programs are not included as SAPs for the purpose of these estimates; rather SCI security costs are 
integrated and estimated throughout all categories as appropriate. Do not include costs here that have been 
reported under the other primary categories. 

Security and Investigative Matters: The investigation of security incidents, infractions, and violations. 

Industrial Security (Non-Contractor Costs): Those measures and resources directly identifiable as 
Government activities performed for the protection of classified information to which contractors, subcontractors, 
vendors, or suppliers have access or possession. Examples of such activities are industrial security reviews, 
surveys, and the granting of facility clearances, and National industrial Security Program management and 
administration. 

Foreign Ownership, Control, or influence (FOCI): The development and management of a foreign ownership, 
control, or influence program; evaluation of FOCI submissions; the administration and monitoring of FOCI 
information and development of FOCI notifications. 

9. Unique Items: Those department/agency-specific activities that are not reported in any of the primary categories 
but are nonetheless significant, and need to be included, should be noted in this category. Any unique item must 
include a narrative on why it should be included and how the figures were developed. 

III. How to complete the security costs estimates form. The form (page 1) should include estimates of resource costs 
in the aggregate for each of the nine categories. The cost estimates reported should not include costs associated with 
the broader area of assets protection. 

1. Name of Department/Agency: Self-explanatory. 

2. Reporting Categories: List cost estimates in dollar amounts. The cost of personnel associated with the security 
of classified information should be included in the overall cost estimate for each category. If there are no cost 
estimates to be reported for a particular category, indicate with a "0" in the appropriate block. 

3. Totals: The totals for blocks 1-9 will automatically be placed in the appropriate block. 

4. Narrative: In the narrative portion of the form, or in a separate attachment, provide a brief explanation of how cost 
estimates were determined. If there is a significant difference between the total figures for each fiscal year, explain 
the differences. Any figure reported within the Unique Items category should be clearly explained in the narrative 
portion. 
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AGENCY SECURITY CLASSIFICATION COSTS ESTIMATES 


Department/Agency: Overseas Private Investment Corporation 


Fiscal Year: 2014 


llliii 


Please use actual dollar figures. 

| $172,66100] 


$90,559.00 


$31,783.00 


$23,022.001 


Point of Contact: -i; refsnB « gra | wm 

(Name and phon e Emm __ 

Reporting Categories Please use actual dollar figures. 

1. Personnel Security | $172,661.00 _ 

(include clearance program, Initial Investigations, national agency checks when used as basis for 
granting a clearance, adjudication, reinvestigation, polygraph associated with classification-related activities) 

2. Physical Security | $90,559.0 0 

(include physical security equipment, protective forces, intrusion detection arid assessment, 
barrier/controls, tamper-safe monitoring, access control/badging, visitor control associated with 
classification-related activities) 

3. Classification Management | $31,783.00 

(Include resources used to identify, control, transfer, transmit, retrieve, inventory, archive, 
declassify, or destroy classified information) 

4. Declassification -- 

(include resources used to identify and process information subject to the automatic systematic, 
discretionary, or mandatory review programs authorized by Executive Order or Statute) 

5 Protection and Maintenance for Classified Information Systems 1 - $23,022.0 0 

(include resources used to protect and maintain classified information systems from unauthonzed 
access or modification of information, and against the denial of service to authorized users, 

Including measures necessary to detect, document, and counter such threats) 

6. Operations Security and Technical Surveillance Countermeasures 1 $0 ' °° 

(Include personnel and operating expenses associated with OPSEC and TSCM) 

7 Professional Education, Training, and Awareness I $14,198 ,00 

(include resources used to establish, maintain, direct, support, and assess an Information secunty 

training and awareness program; certification and approval of the training program, development, 
management, and maintenance of training records; training of personnel to perform tasks, and 
qualification and/or certification of personnel associated with classification-related activities) 

8 Security Management, Oversight, and Planning 1 $65,643. 0C 

(include resources associated with research, test, and evaluation; surveys reviews, accreditation, 
and assessments; special access programs; security and Investigative matters, Industrial secunty, 
and foreign ownership, control, or Influence (FOCI)) 

, , . .. $O0( 

9. Unique Items , . „, . .- 

(include department/agency-specific activities not reported In any of the categones listed above, 
but are nonetheless significant and need to be included) 

TOTAL I * 397 ’ 86 ^ 

(sum of items 1-9) 

Narrative: Provide a brief explanation of any significant difference between last year's and this year's cost 
estimates. Explain items entered into block 9, Unique Items. 

The increase of our total by $40,000 between the FY2013 report and FY2014 report relate to the hiring of 
one new FTE (who was reported as a partial year detailee in FY2013) and the promotion of another FTE 

from a GS 13 to a GS 14. 


$14,198.00] 


$65,643.001 


$397,866.00 
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Instructions for Completing Form 

I. General: The data reported will be Government cost estimates only. The estimates of resource costs should be 
reported, in the aggregate, for the following categories: (1) Personnel Security; (2) Physical Security; (3) Classification 
Management; (4) Declassification; (5) Protection and Maintenance for Classified information Systems; (6) Operations 
Security and Technical Surveillance Countermeasures; (7) Professional Education, Training, and Awareness' (8) 
Security Management, Oversight, and Planning; and (9) Unique Items. In reporting cost estimates associated with the 
security and management of classified information, please exclude all costs related to broad areas of assets protection 
(i.e., protection of property and personnel not specifically related to classified information). Counterintelligence* 
resources should also not be included in this data collection. If 51% or more of a resource is devoted to a classification- 
related activity, it should be included in this estimate. For those resources used for classification-related activities on a 
part-time basis, the total time devoted to these activities over a year must be at least 51% in order to be included in this 
estimate Even though we no longer ask for the number of FTEs, the cost of personnel associated with the security of 
classified information should be included in the overall cost estimate for each category. 

II. Definitions of data to be reported: The primary categories are defined below along with related functional areas to 
be considered for inclusion. Report only those cost estimates associated with classification-related activities 
(programs that affect the security of classified information). 

1. Personnel Security: A series of interlocking and mutually supporting program elements that initially establish a 
Government or contractor employee's eligibility, and ensure suitability for the continued access to classified 
information. 


Clearance Program: Personnel and activities to determine eligibility and suitability for initial or continuing 
access to classified information or activities. 

Initial Investigations: Completing and reviewing Personnel Security Questionnaire, initial screening, filing data 
m Central Personnel Database, forwarding to appropriate investigative authority, and the investigation itself. 

National Agency Check: Include only when used for basis for granting a clearance. 

Adjudication: Screening and analysis of personnel security cases for determining eligibility for classified 
access authorizations and appeals process. 

Reinvestigations: Periodic recurring investigations of Government and contractor personnel. 

Polygraph: Substantive examinations in security screening process. 

2. Physical Security: That portion of security concerned with physical measures designed to safeguard and protect 
classified facilities and information, domestic or foreign. 


Physical Security Equipment: Any item, device, or system that is used primarily for the protection of classified 
information and installations. 

Protective Forces: All personnel and operating costs associated with protective forces used to safeguard 
classified information or installations, to include but not limited to salaries, overtime, benefits, materials and 
supplies, equipment and facilities, vehicles, aircraft, training, communications equipment, and management. 

Intrusion Detection and Assessment: Alarms, sensors, protective lighting, and their control systems; and the 
assessment of the reliability, accuracy, timeliness, and effectiveness of those systems used to safeguard 
classified information or installations. 

Barrier/Controls: Walls, fences, barricades, or other fabricated or natural impediments to restrict, limit delay 
or deny entry into a classified installation. 


Counterintelligence means information gathered and activities conducted to protect against espionage, other 
intelligence activities, sabotage, or assassinations conducted for or on behalf of foreign powers, organizations or persons 
or international terrorist activities, but not including personnel, physical, document, or communications security programs 
(48 CFR 970.0404-1) 


AUTHORIZED FOR LOCAL REPRODUCTION 
Page 2 of 4 


National archives and records administration 


STANDARD FORM 716 (07-11) 
Prescribed by NARA/ISOO 
32 CFR Part 2001.90 E.O. 13626 


Instructions for completing form, continued 

Vital Components and Tamper-Safe Monitoring: Personnel and operating activities associated with the 
monitoring of tamper indicating devices for containers, doors, fences, etc., which reveal violations of 
containment integrity and posting and monitoring of anti-tamper warnings or signs. 

Access Control/Badging: Personnel and hardware such as badging systems, card readers, turnstiles, metal 
detectors, cipher locks, CCTV, and other access control mechanisms to ensure that only authorized persons are 
allowed to enter or leave a classified facility. 

Visitor Control: Personnel and activities associated with processing visitors for access to facilities holding 
classified information. 

3. Classification Management: The system of administrative policies and procedures for identifying, controlling, 
and protecting from unauthorized disclosure, classified information, the protection of which is authorized by 
Executive Order or Statute. Classification management encompasses those resources used to identify, control, 
transfer, transmit, retrieve, inventory, archive, declassify, or destroy classified information. 

4. Declassification: The authorized change in the status of information from classified information to unclassified 
information. It encompasses those resources used to identify and process information subject to the automatic, 
systematic, or mandatory review programs authorized by Executive Order or Statute. 

5 Protection and Maintenance for Classified Information Systems: A classified information system is a set of 
information resources organized for the collection, storage, processing, maintenance, use, sharing, dissemination, 
disposition display, or transmission of classified information. Security of these systems involves the protection of 
information systems against unauthorized access to or modification of information, whether in storage processing, 
or transit and against the denial of service to authorized users, including those measures necessary to detect, 
document and counter such threats. This includes TEMPEST (short name referring to investigation study and 
control of compromising emanations from information systems equipment) and Communications Security 
{COMSEC) (measures and controls taken to deny unauthorized individuals information derived from . 
telecommunications and to ensure the authenticity of such telecommunications. Communications security includes 
cryptosecurity, transmission security, emission security, and physical security of COMSEC matenal). 

6. Operations Security (OPSEC) and Technical Surveillance Countermeasures (TSCM): 

Operations Security (OPSEC): Systematic and proven process by which potential adversaries can be denied 
information about capabilities and intentions by identifying, controlling, and protecting generally unclassified 
evidence of the planning and execution of sensitive activities. The process involves five steps: identification of 
critical information, analysis of threats, analysis of vulnerabilities, assessment of risks, and application of 
appropriate countermeasures. 

Technical Surveillance Countermeasures (TSCM): Personnel and operating expenses associated with the 
development, training, and application of technical security countermeasures such as non-destructive and 
destructive searches, electromagnetic energy searches, and telephone system searches. 

7. Professional Education, Training, and Awareness: The establishment, maintenance, direction, support, and 
assessment of an information security training and awareness program; the certification and approval of the training 
Droqram- the development, management, and maintenance of training records; the training of personnel to perform 
tasks associated with their duties; and qualification and/or certification of personnel before assignment of security 
responsibilities related to classified information. 

8. Security Management, Oversight, and Planning: Development and implementation of plans, procedures and 
actions to accomplish policy requirements, develop budget and resource requirements, oversee organizational 
activities, and respond to management requests related to classified information. 

Research, Test, and Evaluation: The development, management, and oversight of an acceptance and 
validation testing and evaluation program, corrective action reports and related documentation that addresses 
safeguards and security elements. The examination and testing of physical security systems (construction, 
facilities, and equipment) to ensure their effectiveness and operability and compliance with applicable directives. 
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Instructions for completing form, continued 

Surveys, Reviews, Accreditation, and Assessments: Personnel and activities associated with surveys, 
reviews, accreditations, and assessments to determine the status of the security program and to evaluate its 
effectiveness; development and management of a facility survey and approval program; facility pre-survey and 
information technology system accreditation. 

Special Access Programs (SAP): Programs established for a specific class of classified information that 
impose safeguarding and access requirements that exceed those normally required for information at the same 
classification level. Unless specifically authorized by the President, only the Secretaries of State, Defense, 
Energy, and the Director of National Intelligence may create an SAP. Sensitive Compartmented Information 
(SCI) programs are not included as SAPs for the purpose of these estimates; rather SCI security costs are 
integrated and estimated throughout all categories as appropriate. Do not include costs here that have been 
reported under the other primary categories, 

Security and Investigative Matters: The investigation of security incidents, infractions, and violations. 

Industrial Security (Non-Contractor Costs): Those measures and resources directly identifiable as 
Government activities performed for the protection of classified information to which contractors, subcontractors, 
vendors, or suppliers have access or possession. Examples of such activities are industrial security reviews, 
surveys, and the granting of facility clearances, and National Industrial Security Program management and 
administration. 


Foreign Ownership, Control, or Influence (FOCI): The development and management of a foreign ownership, 
control, or influence program; evaluation of FOCI submissions; the administration and monitoring of FOCI 
information and development of FOCI notifications. 

9. Unique Items: Those department/agency-specific activities that are not reported in any of the primary categories 
but are nonetheless significant, and need to be included, should be noted in this category. Any unique item must 
include a narrative on why it should be included and how the figures were developed. 

III. How to complete the security costs estimates form. The form (page 1) should include estimates of resource costs 
in the aggregate for each of the nine categories. The cost estimates reported should not include costs associated with 
the broader area of assets protection. 

1 . Name of Department/Agency: Self-explanatory. 

2. Reporting Categories: List cost estimates in dollar amounts. The cost of personnel associated with the security 
of classified information should be included in the overall cost estimate for each category. If there are no cost 
estimates to be reported for a particular category, indicate with a "0" in the appropriate block. 

3. Totals: The totals for blocks 1-9 will automatically be placed in the appropriate block. 

4. Narrative: In the narrative portion of the form, or in a separate attachment, provide a brief explanation of how cost 
estimates were determined. If there is a significant difference between the total figures for each fiscal year, explain 
the differences. Any figure reported within the Unique Items category should be clearly explained in the narrative 
portion. 
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AGENCY SECURITY CLASSIFICATION COSTS ESTIMATES 

Department/Agency: Overseas Private Investment Corporation 1 Fiscal Year jOIJL 


Please use actual dollar figures. 

[ $223,429.18 


$94,785.39 


$33,661.61 


Point of Contact: 

(Name and pho ne .. - _______ 

_ .. Please use actual dollar f 

Reporting Categories 

~ $223 4/ 

1 Personnel Security .--- L— 

n 'nHnrip clearance oroqram, initial investigations, national agency checks when used as basis for 
granting a clearance, adjudication, reinvestigation, polygraph associated with classification-related activities) 

. „ $94,71 

2. Physical Security ,- 

(include physical security equipment, protective forces, Intrusion detection and assessment 
barrier/controls, tamper-safe monitoring, access control/badgmg, visitor control associated with 
classification-related activities) 

. $33,6 

3. Classification Management -—— L - 

(include resources used to identify, control, transfer, transmit, retrieve, inventory, archive, 

declassify, or destroy classified information) 

4. Declassification , u ---— 

(include resources used to identify and process information subject to the automatic, systematic, 

discretionary, or mandatory review programs authorized by Executive Order or Statute) 

5 Protection and Maintenance for Classified Information Systems \ ^ 21 — 

(Include resources used to protect and maintain classified information systems from unauthonzed 
access ™modification of information, and against the denial of service to au homed users, 
including measures necessary to detect, document, and counter such threats) 

6. Operations Security and Technical Surveillance Countermeasures- 

(include personnel and operating expenses associated with OPSEC and TSCM) __ 

7 Professional Education, Training, and Awareness - 

(Include resources used to establish, maintain, direct, support, and assess an Information security 

training and awareness program; certification and approval of the fra/n/cgprograr^devetopmenf, 
rnanaoement and maintenance of training records; training of personnel to perform tasks, and 
qualiffcation and/or certification of personnel associated with classification-related activities) 

8 Security Management, Oversight, and Planning -— 

(include resources associated with research, test, and evaluation; surveys reviews, accreditation, 

and assessments; special access programs; security and investigative matters, industnal secunty, 
and foreign ownership, control, or influence (FOCI)) 

%M™teptrt™™agency-specific activities not reported In any of the categories listed above, 
but are nonetheless significant and need to be included) 

TOTAL 

(sum of items 1-9) _ 

"Narrative: Provide a brief explanation of any significant difference between last year's and this year's cosf 
estimates. Explain items entered into block 9, Unique Items. 

Increase in numbers is due to an additional FTE and a contractor. 


$21,089.251 


$15,419.761 


$58,368.27 ] 


$446,753.46| 
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Instructions for Completing Form 

I. General: The data reported will be Government cost estimates only. The estimates of resource costs should be 
reported, in the aggregate, for the following categories: (1) Personnel Security; (2) Physical Security (3) Classification 

Securitv and t! 4 h DeC f| SlfiCa N i0n ’ (5 > Protection and Maintenance for Classified information Systems; (6) Operations 
V M d T h cal Surveillance Countermeasures; (7) Professional Education, Training, and Awareness 9 (8) 

secur£^andmfnaoemenrnf 8 'i ' a f nd H P,annin 9. ; and ,< 9 > UnidUe ltems -reporting cost estimates associated with the 
^ ?! of classified information, please exclude all costs related to broad areas of assets protection 

(. ., protection of property and personnel not specifically related to classified information). Counterintelligence* 
““ a ' so "°‘ be '" cluded in ‘his data collection. If 51% or more of a resource is devoted to a classification- 
Darthme hask tteSiS p 6 ln ^ luded ‘ nth, s estimate. For those resources used for classification-related activities on a 
basis ' he to h tal time devoted t0 these activities over a year must be at least 51% in order to be included in this 
® at ™ ate . E f n th “* h no longer ask for the number of FTEs, the cost of personnel associated with the security of 
classified information should be included in the overall cost estimate for each category. V 

ha rnncidL 0 "^ f° f d3t f t0 be D re P°rted: The primary categories are defined below along with related functional areas to 
be considered for inclusion. Report only those cost estimates associated with classification-related activities 
(programs that affect the security of classified information). 

1 Personnel Security: A series of interlocking and mutually supporting program elements that initially establish a 

Government or contractor employee's eligibility, and ensure suitability for the continued access to classified 
information. 

Clearance Program: Personnel and activities to determine eligibility and suitability for initial or continuing 
access to classified information or activities. 

Initial Investigations: Completing and reviewing Personnel Security Questionnaire, initial screening, filing data 
in Central Personnel Database, forwarding to appropriate investigative authority, and the investigation itself. 

National Agency Check: Include only when used for basis for granting a clearance. 

Adjudication: Screening and analysis of personnel security cases for determining eligibility for classified 
access authorizations and appeals process. 

Reinvestigations: Periodic recurring investigations of Government and contractor personnel. 

Polygraph: Substantive examinations in security screening process. 

S ,! curity : That podion securi ‘y concerned with physical measures designed to safeguard and protect 
classified facilities and information, domestic or foreign. 

Physical Security Equipment: Any item, device, or system that is used primarily for the protection of classified 
information and installations. 

Protective Forces: All personnel and operating costs associated with protective forces used to safeguard 
classified information or installations, to include but not limited to salaries, overtime, benefits, materials and 
supplies, equipment and facilities, vehicles, aircraft, training, communications equipment, and management. 

Intrusion Detection and Assessment: Alarms, sensors, protective lighting, and their control systems; and the 
assessment of the reliability, accuracy, timeliness, and effectiveness of those systems used to safeguard 
classified information or installations. y 

Barrier/Controls: Walls, fences, barricades, or other fabricated or natural impediments to restrict, limit delay 
or deny entry into a classified installation. y ’ 

* Counterintelligence means information gathered and activities conducted to protect against espionage other 
intelligence activities sabotage, or assassinations conducted for or on behalf of foreign powers, organizations or persons 

ScreSmSST aCtiViti8S ' “ n0t indUdin9 PerS ° nne1, PhySiCal ' d ° CUment ' or communicati ° ns security programs 8 
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Instructions for completing form, continued 

Vital Components and Tamper-Safe Monitoring: Personnel and operating activities associated with the 
monitoring of tamper indicating devices for containers, doors, fences, etc., which reveal violations of 
containment integrity and posting and monitoring of anti-tamper warnings or signs. 

Access Control/Badging: Personnel and hardware such as badging systems, card readers turnstiles, metal 
detectors, cipher locks, CCTV, and other access control mechanisms to ensure that only authorized persons are 
allowed to enter or leave a classified facility. 

Visitor Control: Personnel and activities associated with processing visitors for access to facilities holding 
classified information. 

3 Classification Management: The system of administrative policies and procedures for identifying, controlling, 
and protecting from unauthorized disclosure, classified information, the protection of which is authonzed by 
Executive Order or Statute. Classification management encompasses those resources used to identify, control, 
transfer, transmit, retrieve, inventory, archive, declassify, or destroy classified information. 

4. Declassification: The authorized change in the status of information from classified information to unclassified 
information. It encompasses those resources used to identify and process information subject to the automati , 
systematic, or mandatory review programs authorized by Executive Order or Statute. 

5 Protection and Maintenance for Classified Information Systems: A classified information system is a set of 
fnformSion resources organized for the collection, storage, processing, maintenance, use, sharing, dissemination, 
disDosition display or transmission of classified information. Security of these systems involves the protection of 
information systems against unauthorized access to or modification of information, whether in storage processing, 
or transit and against the denial of service to authorized users, including those measures necessary to detect, 
document and counter such threats. This includes TEMPEST (short name referring to investigation study and 
control of compromising emanations from information systems equipment) and Communications Security 
(COMSEC) (measures and controls taken to deny unauthorized individuals information derived from ... 

telecommunications and to ensure the authenticity of such telecommunication^^ includes 

cryptosecurity, transmission security, emission security, and physical security of COMSEC material). 

6. Operations Security (OPSEC) and Technical Surveillance Countermeasures (TSCM): 

Operations Security (OPSEC): Systematic and proven process by which potential adversaries can be denied 
information about capabilities and intentions by identifying, controlling, and protecting generally unclassified 
evidence of the planning and execution of sensitive activities. The process involves five steps, identification o 
critical information, analysis of threats, analysis of vulnerabilities, assessment of risks, and application of 
appropriate countermeasures. 

Technical Surveillance Countermeasures (TSCM): Personnel and operating expenses associated with the 
development, training, and application of technical security countermeasures such as non-destructive and 
destructive searches, electromagnetic energy searches, and telephone system searches. 

7 Professional Education, Training, and Awareness: The establishment, maintenance, direction, support and 
assessment of an information security training and awareness program; the certification and approval of the training 
program- the development, management, and maintenance of training records; the training of personnel to perform 
tasks associated with their duties; and qualification and/or certification of personnel before assignment of security 
responsibilities related to classified information. 

8 Security Management, Oversight, and Planning: Development and implementation of plans, procedures and 
actlonstoaccomplish policy requirements, develop budget and resource requirements, oversee organizational 
activities, and respond to management requests related to classified information. 

Research Test, and Evaluation: The development, management, and oversight of an acceptance and 
validation testing and evaluation program, corrective action reports and related documentation that addresses 
safeguards and security elements. The examination and testing of physical security systems (construction, 
facilities and equipment) to ensure their effectiveness and operability and compliance with applicable directives. 
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Instructions for completing form, continued 

Surveys, Reviews, Accreditation, and Assessments: Personnel and activities associated with surveys 
reviews, accreditations, and assessments to determine the status of the security program and to evaluate’its 
effectiveness; development and management of a facility survey and approval program; facility pre-survey and 
information technology system accreditation. ’ 

Special Access Programs (SAP): Programs established for a specific class of classified information that 
impose safeguarding and access requirements that exceed those normally required for information at the same 
classification level. Unless specifically authorized by the President, only the Secretaries of State Defense 
Energy, and the Director of National Intelligence may create an SAP. Sensitive Compartmented information 
(SCI) programs are not included as SAPs for the purpose of these estimates; rather SCI security costs are 
integrated and estimated throughout all categories as appropriate. Do not include costs here that have been 
reported under the other primary categories. 

Security and Investigative Matters: The investigation of security incidents, infractions, and violations. 

Industrial Security (Non-Contractor Costs): Those measures and resources directly identifiable as 
Government activities performed for the protection of classified information to which contractors, subcontractors 
vendors, or suppliers have access or possession. Examples of such activities are industrial security reviews 
surveys and the granting of facility clearances, and National Industrial Security Program management and ' 
administration. 

Foreign Ownership, Control, or Influence (FOCI): The development and management of a foreign ownership 
control, or influence program; evaluation of FOCI submissions; the administration and monitorinq of FOCI 
information and development of FOCI notifications. 

9. Unique Items: Those department/agency-specific activities that are not reported in any of the primary categories 
but are nonetheless significant, and need to be included, should be noted in this category. Any unique item must 
include a narrative on why it should be included and how the figures were developed. 

,n'ih 0 0 ™ C T P f lete th ! S f.K Urity C ° stS estimates form - The form (page 1) should include estimates of resource costs 
n the aggregate for each of the nine categories. The cost estimates reported should not include costs associated with 
the broader area of assets protection. 

1. Name of Department/Agency: Self-explanatory. 

2 Reporting Categories: List cost estimates in dollar amounts. The cost of personnel associated with the security 
of classified information should be included in the overall cost estimate for each category. If there are no cost 
estimates to be reported for a particular category, indicate with a "0" in the appropriate block. 

3. Totals. The totals for blocks 1-9 will automatically be placed in the appropriate block. 

4. Narrative: In the narrative portion of the form, or in a separate attachment, provide a brief explanation of how cost 
estimates were determined. If there is a significant difference between the total figures for each fiscal year, explain 

the differences. Any figure reported within the Unique Items category should be clearly explained in the narrative 
portion. 
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AGENCY SECURITY CLASSIFICATION COSTS ESTIMATES 

Department/Agency: Overseas Private Investment Corporation _ Fiscal Year2016 


$137,751.95 


$28,828.68 


Point of Contact: 

(Name and pho ne number) _ 

_ .. ^ r'.t.-Ai'iac Please use actual dollar figures. 

Reporting Categories _ 

' $291,847.30 

1. Personnel Security _ „ h . .„ -— ! - 

/inrinrip clearance oroaram Initial investigations, national agency checks when used as basis for 
granting a clearance, adjudication, reinvestigation, polygraph associated with classification-related activities) 

, , „ ., $137,7 

2. Physical Security . . --—— 

(Include ohvsicat security equipment, protective forces, intrusion detection and assessment, 
barrier/controls, tamper-safe monitoring, access control/badging, visitor control associated with 
classification-related activities) 

. P $28,8 

3. Classification Management - l_ 

(include resources used to Identify, control, transfer, transmit, retrieve, inventory, archive, 
declassify, or destroy classified information) 

4. Declassification „ , ---- 

(include resources used to Identify and process information subject to the automatic systematic, 
discretionary, or mandatory review programs authorized by Executive Order or Statute) 

5 Protection and Maintenance for Classified Information Systems 1 

(include resources used to protect and maintain classified Information s y stem ^ u ^ onzed 
access or modification of information, and against the denial of service tc, authorized users, 
including measures necessary to detect, document, and counter such threats) 

6. Operations Security and Technical Surveillance Countermeasures- 

(include personnel and operating expenses associated with OPSEC and TSCM) 

7 Professional Education, Training, and Awareness - 

/mciude resources used to establish, maintain, direct, support, and assess an Information secunty 
training and awareness program; certification and approval of the (ra/n/ngprogmm, deve/opmeot, 
management, and maintenance of training records; training of personnel to perform tasks and 
qualification and/or certification of personnel associated with classification-related activities) 

8 Security Management, Oversight, and Planning - 

(include resources associated with research, test, and evaluation; surveys reviews accredits ion, 
and assessments; special access programs; security and investigative matters, industrial secunty, 
and foreign ownership, control, or Influence (FOCI)) 

^include 'deptrtrMnt/agency-specific activities not reported In any of the categories listed above, 
but are nonetheless significant and need to be included) 

~ $624, 

TOTAL - 

(sum of items 1-9) 

Narrative: Provide a brief explanation of any significant difference between last year's and this year’s cost 
estimates. Explain items entered into block 9, Unique Items. 


$11,805.40 


$11,886.25 


$142,184.13 


$624,303.71 
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Instructions for Completing Form 

L Ge "® ra ! : "L he data reported wil1 be Government cost estimates only. The estimates of resource costs should be 

following categories: (1) Personnel Security; (2) Physical Security; (3) Classification 
Vr eCl ff f,Ca ° n: (5 y Protectlon and Maint0 nance for Classified information Systems; (6) Operations 
y and Technical Surveillance Countermeasures; (7) Professional Education, Training, and Awareness (8) 

securi^nZfn™iJf 'IT T™ 9 - and , (9) UniqUe ltems ' ln re P° rtin 9 cost “Amatos associated with the 

n « „ 1 9 ? ° fc l assified information, please exclude all costs related to broad areas of assets protection 

(i.e., protection of property and personnel not specifically related to classified information). Counterintelliqence* 

a ' S °, P w °‘ b8 i " c L uded in this data collection. If 51% or more of a resource is devoted to a classification- 
DartSiehS th S e h r° U t1 f® In ^ luded ' n th, s estimate. For those resources used for classification-related activities on a 
P ald ' tia ? e basis ' ,! he tatal tlme devoted to these activities over a year must be at least 51% in order to be included in this 
f yen th ( ou 9 h we no longer ask for the number of FTEs, the cost of personnel associated with the security of 
classified information should be included in the overall cost estimate for each category. 

be considered for < in a r t h,«?nn e R rePO l! ed: | T ^ P rimar V categories are defined below along with related functional areas to 
be considered for inclusion. Report only those cost estimates associated with classification-related activities 
(programs that affect the security of classified information). 

1 . Personnel Security: A series of interlocking and mutually supporting program elements that initially establish a 
information 1 ^ COn ractor em P |o y ee ' s eligibility, and ensure suitability for the continued access to classified 

Clearance Program: Personnel and activities to determine eligibility and suitability for initial or continuing 
access to classified information or activities. 

Initial Investigations: Completing and reviewing Personnel Security Questionnaire, initial screening, filing data 
in Central Personnel Database, forwarding to appropriate investigative authority, and the investigation itself. 

National Agency Check: Include only when used for basis for granting a clearance. 

Adjudication: Screening and analysis of personnel security cases for determining eligibility for classified 
access authorizations and appeals process. 

Reinvestigations: Periodic recurring investigations of Government and contractor personnel. 

Polygraph: Substantive examinations in security screening process. 

LoISf' S , e f CUrity ; Tt ! at podion ofsecurity concerned with physical measures designed to safeguard and protect 
classified facilities and information, domestic or foreign. 

Physical Security Equipment: Any item, device, or system that is used primarily for the protection of classified 
information and installations. 

Protective Forces: All personnel and operating costs associated with protective forces used to safeguard 
classified information or installations, to include but not limited to salaries, overtime, benefits, materials and 
supplies, equipment and facilities, vehicles, aircraft, training, communications equipment, and management. 

Intrusion Detection and Assessment: Alarms, sensors, protective lighting, and their control systems; and the 
assessment of the reliability, accuracy, timeliness, and effectiveness of those systems used to safeguard 
classified information or installations. 

Barrier/Controls: Walls, fences, barricades, or other fabricated or natural impediments to restrict limit delay 
or deny entry into a classified installation. ’ y ' 

‘ Counterintelligence means information gathered and activities conducted to protect against espionaqe other 
intelligence activities, sabotage, or assassinations conducted for or on behalf of foreign powers, organizations or persons 
°48 n CFR a 970 0404°) aCt ' V ' tleS ' but not including P ersonnel ' Physical, document, or communications security programs 
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Instructions for completing form, continued 

Vital Components and Tamper-Safe Monitoring: Personnel and operating activities associated with the 
monitoring of tamper indicating devices for containers, doors, fences, etc., which reveal violations of 
containment integrity and posting and monitoring of anti-tamper warnings or signs. 

Access Control/Badging: Personnel and hardware such as badging systems, card readers turnstiles, metal 
detectors, cipher locks, CCTV, and other access control mechanisms to ensure that only authorized persons are 
allowed to enter or leave a classified facility. 

Visitor Control: Personnel and activities associated with processing visitors for access to facilities holding 
classified information. 

3 Classification Management: The system of administrative policies and procedures for identifying, controlling, 
and protecting from unauthorized disclosure, classified information, the protection ofwh'ch is authoriMd by 
Executive Order or Statute. Classification management encompasses those resources used to identify, control, 
transfer, transmit, retrieve, inventory, archive, declassify, or destroy classified information. 

4. Declassification: The authorized change in the status of information from classified information to unclassified 
information. It encompasses those resources used to identify and process information subject to the automatic, 
systematic, or mandatory review programs authorized by Executive Order or Statute. 

5 Protection and Maintenance for Classified Information Systems: A classified information system is a set of 
information resources organized for the collection, storage, processing, maintenance, use, sharing, dissemination, 
disposition display, or transmission of classified information. Security of these systems involves the protection of 
information systems against unauthorized access to or modification of information, whether in storage processing, 
or transit and against the denial of service to authorized users, including those measures necessary to detect 
document and counter such threats. This includes TEMPEST (short name referring to investigation study and 
control of compromising emanations from information systems equipment) and Communications Security 
(COMSEC) (measures and controls taken to deny unauthorized individuals information derived from 
telecommunications and to ensure the authenticity of such telecommunicate includes 

cryptosecurity, transmission security, emission security, and physical security of COMSEC material). 

6. Operations Security (OPSEC) and Technical Surveillance Countermeasures (TSCM): 

Ooerations Security (OPSEC): Systematic and proven process by which potential adversaries can be denied 
information about capabilities and intentions by identifying, controlling, and protecting generally unclassified 
evidence of the planning and execution of sensitive activities. The process involves five steps, identification of 
critical information, analysis of threats, analysis of vulnerabilities, assessment of risks, and application of 
appropriate countermeasures. 

Technical Surveillance Countermeasures (TSCM): Personnel and operating expenses associated with the 
development, training, and application of technical security countermeasures such as non-destructive and 
destructive searches, electromagnetic energy searches, and telephone system searches. 

7. Professional Education, Training, and Awareness: The establishment, maintenance, direction, support and 
assessment of an information security training and awareness program; the certification and apprpval of the training 
program; the development, management, and maintenance of training records; the training of personnel to perform 
tasks associated with their duties; and qualification and/or certification of personnel before assignment of security 
responsibilities related to classified information. 

8 Security Management, Oversight, and Planning: Development and implementation of plans, procedures and 
actions to accomplish policy requirements, develop budget and resource requirements, oversee organizational 
activities, and respond to management requests related to classified information. 

Research Test and Evaluation: The development, management, and oversight of an acceptance and 
validation testing and evaluation program, corrective action reports and related documentation that addresses 
safeguards and security elements. The examination and testing of physical security systems (construction, 
facilities and equipment) to ensure their effectiveness and operability and compliance with applicable directives. 
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Instructions for completing form, continued 

Surveys, Reviews, Accreditation, and Assessments: Personnel and activities associated with surveys, 
reviews, accreditations, and assessments to determine the status of the security program and to evaluate its 
effectiveness; development and management of a facility survey and approval program; facility pre-survey and 
information technology system accreditation. 


Special Access Programs (SAP): Programs established for a specific class of classified information that 
impose safeguarding and access requirements that exceed those normally required for information at the same 
classification level. Unless specifically authorized by the President, only the Secretaries of State, Defense, 
and the Director of National Intelligence may create an SAP. Sensitive Compartmented Information 
(SCI) programs are not included as SAPs for the purpose of these estimates; rather SCI security costs are 
integrated and estimated throughout all categories as appropriate. Do not include costs here that have been 
reported under the other primary categories. 


Security and Investigative Matters: The investigation of security incidents, infractions, and violations. 

Industrial Security (Non-Contractor Costs): Those measures and resources directly identifiable as 
Government activities performed for the protection of classified information to which contractors, subcontractors, 
vendors, or suppliers have access or possession. Examples of such activities are industrial security reviews, 
surveys, and the granting of facility clearances, and National Industrial Security Proqram management and 
administration. 


Foreign Ownership, Control, or Influence (FOCI): The development and management of a foreign ownership, 
control, or influence program; evaluation of FOCI submissions; the administration and monitoring of FOCI 
information and development of FOCI notifications. 

9. Unique Items: Those department/agency-specific activities that are not reported in any of the primary categories 
but are nonetheless significant, and need to be included, should be noted in this category. Any unique item must 
include a narrative on why it should be included and how the figures were developed. 

III. How to complete the security costs estimates form. The form (page 1) should include estimates of resource costs 
in the aggregate for each of the nine categories. The cost estimates reported should not include costs associated with 
the broader area of assets protection. 

1. Name of Department/Agency: Self-explanatory. 

2. Reporting Categories: List cost estimates in dollar amounts, The cost of personnel associated with the security 
of classified information should be included in the overall cost estimate for each category. If there are no cost 
estimates to be reported for a particular category, indicate with a "0" in the appropriate block. 

3. Totals: The totals for blocks 1-9 will automatically be placed in the appropriate block. 

4. Narrative: In the narrative portion of the form, or in a separate attachment, provide a brief explanation of how cost 
estimates were determined. If there is a significant difference between the total figures for each fiscal year explain 
the differences. Any figure reported within the Unique Items category should be clearly explained in the narrative 
portion. 
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